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Period for Reply 


A SHORTENED STATUTORY PERIOD FOR REPLY IS SET TO EXPIRE 3 MONTH(S) FROM 
THE MAILING DATE OF THIS COMMUNICATION. 

- E)(tensions of time may be available under the provisions of 37 CFR 1 .136(a). In no event, however, may a reply be timely filed 
after SIX (6) MONTHS from the mailing date of this communication. 

• If the period for reply specified above is less than thirty (30) days, a reply within the statutory minimum of thirty (30) days v\nll be considered timely. 

- If NO period for reply is specified above, the maximum statutory period will apply and will expire SIX (6) MONTHS from the mailing date of this communication. 

- Failure to reply within the set or extended period for reply will, by statute, cause the application to become ABANDONED (35 U.S.C. § 133). 
Any reply received by the Office later than three months after the mailing date of this communication, even if timely filed, may reduce any 
earned patent term adjustment. See 37 CFR 1.704(b). 

Status 

I) S Responsive to communication(s) filed on 15 July 2004 . 

2a)S This action is FINAL. 2b)n This action Is non-final. 

3) 0 Since this application is in condition for allowance except for formal matters, prosecution as to the merits is 

closed in accordance with the practice under Ex parte Quayle, 1935 CD. 1 1 , 453 O.G. 213. 

Disposition of Claims 

4) ^ Claim(s) 1-20 is/are pending in the application. 

4a) Of the above claim(s) is/are withdrawn from consideration. 

5) 0 Claim(s) is/are allowed. 

6) 13 Claim(s) 1-20 is/are rejected. 
?)□ Claim(s) is/are objected to. 

8) 0 Clalm(s) are subject to restriction and/or election requirement. 

Application Papers 

9) 0 The specification is objected to by the Examiner. 

10)S The drawing(s) filed on 05 April 2001 is/are: a)S accepted or b)n objected to by the Examiner. 
Applicant may not request that any objection to the drawing(s) be held in abeyance. See 37 CFR 1 .85(a). 
Replacement drawing sheet(s) including the correction is required if the drawing(s) is objected to. See 37 CFR 1.121(d). 

II) 0 The oath or declaration is objected to by the Examiner. Note the attached Office Action orfonm PTO-152. 

Priority under 35 U.S.C. § 1 1 9 

12)n Acknowledgment is made of a claim for foreign priority under 35 U.S.C. § 1 19(a)-(d) or (f). 
a)n All b)n Some * 0)0 None of: 

1 .□ Certified copies of the priority documents have been received. 

2. n Certified copies of the priority documents have been received in Application No. . 

3. n Copies of the certified copies of the priority documents have been received in this National Stage 

application from the International Bureau (PCT Rule 17.2(a)). 
* See the attached detailed Office action for a list of the certified copies not received. 


Attachment(s) 

1) □ Notice of References Cited (PTO-892) 4) □ Interview Summary (PTO-413) 

2) □ Notice of Draflsperson's Patent Drawing Review (PTO-948) Paper No(s)/Mail Date. . 

3) □ Information Disclosure Statement(s) (PTO-1 449 or PTO/SB/08) 5) □ Notice of Informal Patent Application (PTO-1 52) 

Paper No(s)/Mail Date . 6) □ Other: , 


U.S. Patent and Trademark Office 

PTOL-326 (Rev. 1-04) 


Office Action Summary 


Part of Paper No./Mail Date 12212004 


Application/Control Number: 09/827,227 Page 2 

Art Unit: 2131 

DETAILED ACTION 

1. Claims 1-20 have are pending in the application. 

2. Claims 1-20 stand being rejected. 

Response to Arguments 

3. Applicant's arguments filed 7/15/04 have been fully considered but they are not persuasive. 

On pages 2-3, the Applicant argues that Schneier does not teach or suggest each and 
every element of the claimed invention. The Applicant argues that Schneier does not teach or 
suggest "any portion of a result associated with the function that is outside the group is 
randomized . . . and remov[ing] the randomization of any portion of the resuh associated with the 
function that is outside the group," as recited in the claimed invention. 

The Examiner respectfully disagrees. Schneier teaches generating a random string Rb and 
it is sent to Alice. Schneier teaches performing the inverse group function (i.e. decrypting). 
Schneier teaches removing random string Rb when encrypting random string Ra . 

On page 3, the Applicant argues that Oorschot does not teach randomizing a value 
outside the group. 

The Examiner respectfully disagrees. Oorschot teaches randomizing a value outside of 
the group at the bottom of page 10. 

Double Patenting 

4. Claims 1, 3, 4, 5, 6, 7, and 8 are provisionally rejected under the judicially created 
doctrine of obviousness-type double patenting as being unpatentable over claims 1, 2, 3, 4, 

5. 6, 18 of copending Application No. 09/638320. 
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Although the conflicting claims are not identical, they are not patentably distinct from 
each other because the claims of the immediate application have all of the limitations of the 
copending application's claims. The dependent claims are identical. The independent claims of 
the immediate application, 1 and 8, only differ in that they add the limitation "wherein any 
portion of a result associated with the function that is outside the group is randomized" and the 
limitation "remove the randomization of any portion of the result associated with the function 
that is outside the group". All of the other limitations are claimed in the copending application. 
Schneier (Applied Cryptography) teaches a method of key authenticating as disclosed in the 
copending application. Schneier also teaches randomizing the result on page 520 to strengthen 
the security of the cryptosystem. In view of this it would have been obvious to one of ordinary 
skill in the art at the time of the invention to employ the teachings of Schneier within the 
copending application's system because it would prevent possible attacks to the system by further 
disguising the random numbers. It logically follows that the receiver must then remove the 
randomized portion to recover the intended data. 

This is a provisional obviousness-type double patenting rejection because the conflicting 
claims have not in fact been patented. 

5. Claims 10, 12, 13, 14, 15, and 16 are provisionally rejected under the judicially created 
doctrine of obviousness-type double patenting as being unpatentable over claims 1, 2, 3, 4, 
5, and 6 of copending Application No. 09/638320, 

The rejection is similar to the double patenting rejection made of immediate claims 1, 3, 
4, 5, 6, and 7, the difference being that independent claim 10 disclosed an apparatus which 
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performs the method of claim 1. One of ordinary skill in the art would be able to implement the 
method of claim one as an apparatus. 

6. Claims 17 is provisionally rejected under the judicially created doctrine of 
obviousness-type double patenting as being unpatentable over claims 18 of copending 
Application No. 09/638320. 

The rejection is similar to the double patenting rejection made of immediate claims 8, the 
difference being that independent claim 17 disclosed an apparatus which performs the method of 
claim 1 . One of ordinary skill in the art would be able to implement the method of claim one as 
an apparatus. 

7. Claims 19 and 20 are likewise rejected under the judicially created doctrine of 
obviousness-type double patenting as being unpatentable over claims 1 and 18 of copending 
Application No, 09/638320. 

The rejection is similar to the double patenting rejection made of immediate claims 1 and 

8. the difference being that independent claims 19 and 20 disclosed an article of manufacture, 
which performs the method of claims 1 and 8. One of ordinary skill in the art would be able to 
implement the method of claim one as an article of manufacture. 

Claim Rejections - 35 USC § 102 
The following is a quotation of the appropriate paragraphs of 35 U.S.C. 102 that form the 
basis for the rejections under this section made in this Office action: 

A person shall be entitled to a patent unless - 

(b) the invention was patented or described in a printed publication in this or a foreign country or in pubhc use or on 
sale in this country, more than one year prior to the date of application for patent in the United States. 
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8. Claims 1, 3-8, 10, 12-17, 19, and 20 are rejected under 35 U.S.C 102(b) as being 
anticipated by Schneier (Applied Cryptography). 

As per claims 1, 10, and 19, Schneier teaches a method for communication via a data 
network, between two parties that share a password, using a DifFie-Hellman type key exchange 
on a particular group to generate a shared secret g^, where g is the group generator known to 
both parties and x is an index known to one party and y is an index known to the other party, said 
group having a group operation and an inverse group operation, said method comprising the 
steps of (page 518): one party generating a parameter m by performing the group operation on g^ 
and a function of at least said password, wherein any portion of a result associated with the 
function that is outside the group is randomized and transmitting m to the other party, whereby 
the other party may perform the inverse group operation on m and said function of at least said 
password and remove the randomization of any portion of the result associated with the function 
that is outside the group, to extract g'' and further calculate said shared secret g'^ (page 519-520). 

As per claims 8, 17, and 20, Schneier teaches a method for communication via a data 
network, between two parties that share a password, using a Diflfie-Hellman type key exchange 
on a particular group to generate a shared secret g^, where g is the group generator known to 
both parties and x is an index known to one party and y is an index known to the other party, said 
group having a group operation and an inverse group operation, said method comprising the 
steps of (page 518): responsive to one party generating a parameter m by performing the group 
operation on g'^ and a function of at least said password, wherein any portion of a result 
associated with the function that is outside the group is randomized and transmitting m to the 
other party, whereby the other party may perform the inverse group operation on m and said 
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function of at least said password and remove the randomization of any portion of the result 
associated with the function that is outside the group, to extract g^ and further calculate said 
shared secret g"^ (page 5 1 9-520). 

As per claims 3 and 12, Schneier teaches one party is a client and said other party is a 
server (page 518). 

As per claims 4 and 13, Schneier teaches said one party receiving g^ from said other party 
and generating said shared secret g^ (page 513), 

As per claims 5 and 14, Schneier teaches one party authenticating said other party by 
comparing a received value against a function of at least one of an identifier of said one party, an 
identifier of said other party, m, g^, the shared secret, and the password (verifier) (page 520-521). 

As per claims 6 and 15 Schneier teaches said one party transmitting a function of at least 
one of an identifier of said one party, an identifier of said other party m, g^, the shared secret, and 
the password (verifier), to said other party whereby the other party may authenticate said one 
party (page 520). 

As per claims 7 and 16 Schneier teaches one party generating a session key as a function 
of a least one of an identifier of said one party, an identifier of said other party, m, g^ the shared 
secret, and the password (page 520). 

Claim Rejections - 35 USC §103 

The following is a quotation of 35 U.S.C, 103(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set forth in 
section 102 of this title, if the differences between the subject matter sought to be patented and the prior art are 
such that the subject matter as a whole would have been obvious at the time the invention was made to a person 
ha\ing ordinar}^ skill in the art to which said subject matter pertains. Patentabilit}' shall not be negatived by the 
manner in which the invention was made. 
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9. Claims 2, 9, 11, and 18 are rejected under 35 U.S.C. 103(a) as being unpatentable over 
Schneier in view of Oorschot et al, here Oorschot ("One Diffie-Hellman key Agreement 
with Short Exponents"). 

As per claims 2, 9, 11, and 18, Schneier teaches selecting primes and inserting 
randomizing portion of a result but fails to explicitly teach wherein the particular group, denoted 
as Gp,q is a sub-group of a group Zp where p and q are prime numbers such that p equals rq + 1 
for a value r co-prime to q, and wherein the step of randomizing any portion of a result 
associated with the function that is outside the group Gp,q is performed by computing a parameter 
h, randomly selected from the group Zp, raising the parameter h to the exponent q and 
multiplying h^ by the result associated with the fiinction. Oorschot teaches the particular group, 
denoted as Gp,q is a sub-group of a group Zp where p and q are prime numbers such that p equals 
rq + 1 for a value r co-prime to q, and wherein the step of randomizing any portion of a result 
associated with the function that is outside the group GP,9 is performed by computing a 
parameter h, randomly selected from the group Zp, raising the parameter h to the exponent q and 
multiplying h*^ by the result associated with the function (pages 9-10). Oorschot teaches the use 
of strong primes and why they are safe. Oorschot also teaches how one can introduce a further 
exponent to improve the resilience of factoring. These steps would further increase the security 
of the prime numbers used in Schneier's method. In view of this it would have been obvious to 
one or ordinary skill in the art at the time of the invention to employ the teachings of Oorschot 
within the system of Schneier because it would improve the overall security of Schneier's 
method by implementing proven strong primes into the cryptosystem. 
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Conclusion 

10. THIS ACTION IS MADE FINAL. Applicant is reminded of the extension of time 
policy as set forth in 37 CFR 1.136(a), 

A shortened statutory period for reply to this final action is set to expire THREE 
MONTHS from the mailing date of this action. In the event a first reply is filed within TWO 
MONTHS of the mailing date of this final action and the advisory action is not mailed until after 
the end of the THREE-MONTH shortened statutory period, then the shortened statutory period 
will expire on the date the advisory action is mailed, and any extension fee pursuant to 37 
CFR 1.136(a) will be calculated fi*om the mailing date of the advisory action. In no event, 
however, will the statutory period for reply expire later than SIX MONTHS from the mailing 
date of this final action. 

Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Aravind K Moorthy whose telephone number is 571-272-3793. 
The examiner can normally be reached on Monday-Friday, 8:00-5:30. 

If attempts to reach the examiner by telephone are unsuccessfiil, the examiner's 
supervisor, Ayaz R Sheikh can be reached on 571-272-3795. The fax phone number for the 
organization where this application or proceeding is assigned is 703-872-9306. 


Application/Control Number: 09/827,227 


Page 9 


Art Unit: 2131 

Information regarding the status of an application may be obtained from the Patent 
AppHcation Information Retrieval (PAIR) system. Status information for pubHshed applications 
may be obtained from either Private PAIR or Public PAIR. Status information for unpublished 
applications is available through Private PAIR only. For more information about the PAIR 
system, see http://pair-direct.uspto.gov. Should you have questions on access to the Private PAIR 
system, contact the Electronic Business Center (EBC) at 866-217-9197 (toll-free). 


Aravind K Moorthy 
December 21, 2004 
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